Consumer Counterpoint Quick Take: Case From The 7th Circuit (Video)

Scott L. Vernick was quoted in The Legal Intelligencer article, "Did UPMC Data Breach Ruling Lock Plaintiffs Out of State Court?" on January 23, 2017.

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.

Meta Platforms has agreed to pay $17 billion over ten years to resolve multistate litigation alleging the company engineered Facebook and Instagram to addict minors while concealing the risks. Beyond the historic financial penalty, the settlement mandates sweeping platform changes including default usage limits, overnight lockouts, and parental controls for users under eighteen.

In the last few months, California and New Jersey enacted legislation to protect children online: California’s 13-bill package targets risks to children arising from emerging technologies, while New Jersey’s 3-bill package includes an age-appropriate design code. Despite their differences, these laws share a common focus on protecting children as technology evolves.

On September 15, the Federal Trade Commission ("FTC") issued a policy statement ("Statement") addressing the scope of its Health Breach Notification Rule ("Rule") on health apps and connected devices.

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.

California's legislature has sent a comprehensive package of privacy, AI, and advertising bills to Governor Newsom's desk, with decisions due by September 30, 2026. The legislation addresses sensitive personal information protections, data broker obligations, AI-powered chatbot regulations, and digital replica rights, potentially reshaping how businesses handle consumer data and automated decision-making systems. Will these bills become law and set new national standards for technology regulation?

Federal and state regulators are intensifying scrutiny of healthcare and digital health companies over tracking technologies that share sensitive patient data with advertising platforms. Recent enforcement actions against major telehealth providers and healthcare systems reveal how common marketing practices can trigger significant legal liability under privacy laws, even for organizations not covered by HIPAA.

California Governor Newsom has signed Senate Bill 574 into law, establishing the nation's first statutory framework governing how attorneys and arbitrators use generative AI in their professional practice. The legislation creates specific obligations around confidentiality protection, accuracy verification, and disclosure requirements that take effect January 1, 2027.

U.S. Citizenship and Immigration Services has issued Individual Notices permitting certain Salvadoran Temporary Protected Status beneficiaries to demonstrate continued work authorization through September 9, 2026. This development arrives weeks after most TPS-based Employment Authorization Documents expired, creating challenges for employers and employees navigating reverification procedures and compliance requirements.

The Department of Homeland Security has confirmed that Salvadoran Temporary Protected Status beneficiaries remain protected despite the September 9, 2026 expiration date, though no formal announcement has been made regarding the program's future. This development raises critical questions about employer obligations and the potential scenarios that may unfold, including termination with a 60-day notice period or an extension of the designation.

California's 2026 legislative session concluded with fewer employment bills than in previous years, but several significant measures await Governor Newsom's decision by September 30. Key proposals address automated decision systems in employment, workplace surveillance restrictions, expanded bereavement leave, AI-driven workforce displacement notices, and modifications to last year's controversial "stay-or-pay" legislation.

The California Occupational Safety and Health Standards Board has approved significant revisions to California’s workplace first aid requirements for both construction and general industry. For general industry employers, the most notable change is the elimination of the longstanding requirement that first aid kit contents be approved by a consulting physician. Instead, employers may now comply by providing a first aid kit meeting ANSI/ISEA Z308.1-2021 Class A requirements.

The legal profession has spent the past few years asking whether generative AI is trustworthy. Will it draft a contract, research an issue, summarize a record, or invent a case with impressive confidence? California’s new law shifts the focus to a more practical question: who takes responsibility when lawyers use it?

Federal ADA Title III lawsuit filings have reached 5,006 cases at mid-year 2026, marking the highest level since 2021 and suggesting a potential record-breaking year ahead. California continues to dominate with 2,426 cases, while new plaintiffs' firms enter the market and filing patterns shift across states. Will 2026 surpass the all-time high of 11,452 lawsuits set in 2021?

The European Commission has announced that EU AI Act transparency rules take effect August 2, 2026, requiring chatbots to identify themselves, deepfakes to be labeled, and AI-generated content to be marked. Organizations must assess whether their AI systems trigger disclosure, labeling, or content-marking requirements, with limited exceptions and penalties reaching €15 million or 3% of global turnover for noncompliance.

The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements sold in the European market, establishing a comprehensive framework for hardware and software security. Starting September 11, 2026, manufacturers face new reporting obligations for actively exploited vulnerabilities and severe security incidents, with strict timelines ranging from 24 hours to one month depending on the type of report.

Welcome back to The Week in Weed, your Friday look at what’s happening in the world of legalized marijuana. This week, the DEA decided to pause its consideration of adult-use marijuana rescheduling.